WE'RE SURE THAT YOU'LL LOVE US!
Hey there! 
Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. 
Join 93083 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.
Try What the Tech -- It's free!
This topic is locked
Authentic Member
Posted 06 April 2014 - 10:37 PM
I just got AT&T internet a month ago but now whenever I go to a website, my browser hangs far too long. If i go to Youtube, the videos buffer too long. I don't know what's going on, and it's super frustrating!
I ran Malwarebytes and it doesn't show any virus but i don't know what else to do.
Please help!
Edited by Bperkins7468, 06 April 2014 - 10:38 PM.
Register to Remove
Authentic Member
Posted 07 April 2014 - 12:47 AM
Here is my OTL report:
Malware Guy
Posted 11 April 2014 - 05:35 AM
Hi and Welcome!!
My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:
IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.
DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your operating system and losing all your programs and data.
Having said that.... 
Let's get going!!
----------
It seems that you have ran ComboFix already as well? Could you go to C:\ComboFix.txt and post that text file please?
-------------
FRST
Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
----------
Authentic Member
Posted 11 April 2014 - 02:58 PM
Authentic Member
Posted 11 April 2014 - 03:06 PM
Addition.txt 47.57KB
261 downloadsHi Jeff!
Thanks for replying to my post! I appreciate your help! Here's my FRST txt:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-04-2014
Ran by Byron (administrator) on BYRON-PC on 11-04-2014 14:02:06
Running from C:\Users\Byron\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo...very-scan-tool/
==================== Processes (Whitelisted) =================
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Starfield Technologies) C:\Program Files (x86)\Workspace\offSyncService.exe
(PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Research In Motion Limited) C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe
(BlackBerry Limited) C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Google Inc.) C:\Users\Byron\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Byron\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Byron\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Byron\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Byron\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE
(Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
(Oracle Corporation) C:\Program Files (x86)\Java\jre7\bin\java.exe
(Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
(Google Inc.) C:\Users\Byron\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3854640 2014-04-07] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] - rmdir /s /q "\SearchProtect"
HKU\S-1-5-21-3700817450-263443993-1340972289-1000\...\Run: [BackgroundContainer] - "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Byron\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <===== ATTENTION
HKU\S-1-5-21-3700817450-263443993-1340972289-1000\...\Run: [Amazon Cloud Player] - C:\Users\Byron\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3168576 2014-03-07] ()
HKU\S-1-5-21-3700817450-263443993-1340972289-1000\...\Policies\Explorer: [NoInstrumentation] 1
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA3B23407861ECC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearc...=1024417699&ir=
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL =
SearchScopes: HKLM-x32 - DefaultScope {D3245D6C-6383-4823-9EF2-FA463514A51C} URL =
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://start.sweetpa...7-025031DC0501}
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://search.condui...rchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://search.condui...rchTerms}&SSPV=
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL =
SearchScopes: HKCU - {9E94E40B-C742-41CB-BAC0-BD5D590DCCA5} URL = http://search.yahoo....p={searchTerms}
SearchScopes: HKCU - {B4D84896-6918-41DD-B848-1268BE62AF29} URL = https://www.google.c...q={searchTerms}
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: ValueApps - {93DBF2BB-A2B3-4683-A92E-57E60751F346} - No File
BHO: Inbox Toolbar - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - No File
BHO-x32: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\18.0.0.248\AVG Secure Search_toolbar.dll (AVG Secure Search)
BHO-x32: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - &Inbox Toolbar - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\18.0.0.248\AVG Secure Search_toolbar.dll (AVG Secure Search)
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset...lineScanner.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab
Handler: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - No File
Handler-x32: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - No File
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.0.0\ViProtocol.dll (AVG Secure Search)
Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll File Not found ()
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
FireFox:
========
FF ProfilePath: C:\Users\Byron\AppData\Roaming\Mozilla\Firefox\Profiles\lbefp8bo.default
FF user.js: detected! => C:\Users\Byron\AppData\Roaming\Mozilla\Firefox\Profiles\lbefp8bo.default\user.js
FF SelectedSearchEngine: Conduit Search
FF Homepage: hxxp://search.conduit.com/?ctid=CT3324790&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=5&UP=SP6B97143B-82C1-4CBF-938B-534D73AE67ED&SSPV=
FF NewTab: hxxp://search.conduit.com/?ctid=CT3324790&octid=EB_ORIGINAL_CTID&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP6B97143B-82C1-4CBF-938B-534D73AE67ED
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.0.0\\npsitesafety.dll (AVG Technologies)
FF Plugin-x32: @java.com/DTPlugin,version=10.5.1 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 - C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Byron\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @starfield.com/off - C:\Users\Byron\AppData\Roaming\Mozilla\Plugins\npoff.dll ( Starfield Technologies, LLC.)
FF Plugin HKCU: @starfield.com/off64 - C:\Users\Byron\AppData\Roaming\Mozilla\Plugins\npoff64.dll ( Starfield Technologies, LLC.)
FF Plugin HKCU: @starfield.com/wbe - C:\Users\Byron\AppData\Roaming\Mozilla\Plugins\npwbe.dll (Starfield Technology, LLC)
FF Plugin HKCU: @starfield.com/wbe64 - C:\Users\Byron\AppData\Roaming\Mozilla\Plugins\npwbe64.dll (Starfield Technology, LLC)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Byron\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Byron\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\Byron\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Byron\AppData\Roaming\mozilla\plugins\npoff.dll ( Starfield Technologies, LLC.)
FF Plugin ProgramFiles/Appdata: C:\Users\Byron\AppData\Roaming\mozilla\plugins\npoff64.dll ( Starfield Technologies, LLC.)
FF Plugin ProgramFiles/Appdata: C:\Users\Byron\AppData\Roaming\mozilla\plugins\npwbe.dll (Starfield Technology, LLC)
FF Plugin ProgramFiles/Appdata: C:\Users\Byron\AppData\Roaming\mozilla\plugins\npwbe64.dll (Starfield Technology, LLC)
FF SearchPlugin: C:\Users\Byron\AppData\Roaming\Mozilla\Firefox\Profiles\lbefp8bo.default\searchplugins\conduit-search.xml
FF Extension: WBE Paste - C:\Users\Byron\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\wbepaste@starfield [2011-06-14]
FF Extension: Workspace Email Zoom - C:\Users\Byron\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\zoomext@starfield [2011-06-14]
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\18.0.0.248
FF Extension: AVG Security Toolbar - C:\ProgramData\AVG Secure Search\FireFoxExt\18.0.0.248 [2014-03-03]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-03-15]
Chrome:
=======
CHR Extension: (avast! Online Security) - C:\Users\Byron\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-03-31]
CHR Extension: (Google Wallet) - C:\Users\Byron\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR HKLM\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\Byron\AppData\Local\funmoods.crx [2013-08-30]
CHR HKLM\...\Chrome\Extension: [cjpglkicenollcignonpgiafdgfeehoj] - C:\Users\Byron\AppData\Local\funmoods-speeddial_sf.crx [2013-08-30]
CHR HKCU\...\Chrome\Extension: [medkndcadfefmiifpnlapbeoajnjiahj] - C:\Users\Byron\AppData\Local\CRE\medkndcadfefmiifpnlapbeoajnjiahj.crx [2013-12-12]
CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [2013-12-12]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-04-07]
CHR HKLM-x32\...\Chrome\Extension: [medkndcadfefmiifpnlapbeoajnjiahj] - C:\Users\Byron\AppData\Local\CRE\medkndcadfefmiifpnlapbeoajnjiahj.crx [2013-12-12]
CHR HKLM-x32\...\Chrome\Extension: [mhfdcmehmjcclgopdodkjdicohagipid] - C:\Users\Byron\AppData\Local\CRE\mhfdcmehmjcclgopdodkjdicohagipid.crx [2013-12-12]
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\\ChromeExt\\avg.crx [2013-12-12]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
S4 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-07] (AVAST Software)
R3 BlackBerry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [585728 2014-01-21] (BlackBerry Limited)
R2 File Backup; C:\Program Files (x86)\Workspace\offSyncService.exe [1187040 2013-07-22] (Starfield Technologies)
R2 PCToolsSSDMonitorSvc; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [793048 2011-10-25] (PC Tools)
R2 RIM MDNS; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe [389632 2014-01-22] (Apple Inc.)
R2 RIM Tunnel Service; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe [1309696 2014-01-22] (Research In Motion Limited)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [994360 2011-10-13] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [399416 2011-10-13] (Secunia)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2099512 2013-10-12] (TuneUp Software)
S4 vToolbarUpdater18.0.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe [1759768 2014-03-03] (AVG Secure Search)
S4 avgfws; No ImagePath
S4 AVGIDSAgent; No ImagePath
S4 avgwd; No ImagePath
==================== Drivers (Whitelisted) ====================
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
R2 ASMMAP64; C:\Program Files\ATKGFNEX\ASMMAP64.sys [14904 2007-07-24] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-07] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-07] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-07] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-04-07] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-04-07] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-04-07] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-04-07] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-25] (AVG Technologies CZ, s.r.o.)
S4 AVGIDSDriver; No ImagePath
S4 AVGIDSHA; No ImagePath
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-11-01] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
S4 Avgrkx64; No ImagePath
S4 Avgtdia; No ImagePath
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-03-03] (AVG Technologies)
S3 catchme; No ImagePath
S3 DIRECTIO; No ImagePath
S2 eamonm; No ImagePath
S1 ehdrv; No ImagePath
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
S3 massfilter; No ImagePath
S3 PCTINDIS5X64; No ImagePath
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [79872 2013-12-02] (BlackBerry Limited)
R3 rimvndis; C:\Windows\System32\Drivers\rimvndis6_AMD64.sys [17920 2013-04-26] (Research in Motion Limited)
R3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-13] (Brother Industries Ltd.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1806400 2009-06-05] ()
R3 tmobile_mf691_dc_enum; C:\Windows\System32\DRIVERS\tmobile_mf691_dc_enum.sys [75776 2010-04-09] (T-Mobile)
S3 TuneUpUtilitiesDrv; No ImagePath
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-11] (Microsoft Corporation)
S3 ZTEusbgps; C:\Windows\System32\DRIVERS\ZTEusbgps.sys [123520 2010-12-08] (ZTE Incorporated)
S3 ZTEusbMB; No ImagePath
S3 ZTEusbmdm6k; No ImagePath
S3 ZTEusbnmea; No ImagePath
S3 ZTEusbser6k; No ImagePath
S3 ZTEusbwwan; C:\Windows\System32\DRIVERS\ZTEusbwwan.sys [235008 2011-04-09] (ZTE Incorporated)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-04-11 14:02 - 2014-04-11 14:02 - 00019365 _____ () C:\Users\Byron\Downloads\FRST.txt
2014-04-11 14:01 - 2014-04-11 14:02 - 00000000 ____D () C:\FRST
2014-04-11 14:00 - 2014-04-11 14:00 - 02157056 _____ (Farbar) C:\Users\Byron\Downloads\FRST64.exe
2014-04-11 13:57 - 2014-04-11 13:57 - 00027825 _____ () C:\ComboFix.txt
2014-04-11 13:57 - 2014-04-11 13:57 - 00001404 _____ () C:\Users\Byron\Downloads\agent (3).jnlp
2014-04-11 13:32 - 2014-04-11 13:32 - 05196025 ____R (Swearware) C:\Users\Byron\Downloads\ComboFix.exe
2014-04-11 12:11 - 2014-04-11 12:11 - 01056256 _____ () C:\Users\Byron\Desktop\NFL_ST_PROFIT_CALCULATOR.xls
2014-04-11 08:29 - 2014-04-11 08:29 - 00001404 _____ () C:\Users\Byron\Downloads\agent (2).jnlp
2014-04-11 08:29 - 2014-04-11 08:29 - 00001404 _____ () C:\Users\Byron\Downloads\agent (1).jnlp
2014-04-11 01:19 - 2014-04-11 01:27 - 525038428 ____R () C:\Users\Byron\Downloads\The.Amazing.Race.S24E06.HDTV.x264-LOL.mp4
2014-04-11 01:19 - 2014-04-11 01:19 - 00020502 _____ () C:\Users\Byron\Downloads\[kickass.to]the.amazing.race.s24e06.hdtv.x264.lol.eztv.torrent
2014-04-10 23:14 - 2014-04-10 23:14 - 00009606 _____ () C:\Users\Byron\Downloads\[kickass.to]the.blacklist.s01e18.hdtv.x264.lol.eztv.torrent
2014-04-10 23:12 - 2014-04-10 23:12 - 00045113 _____ () C:\Users\Byron\Downloads\[kickass.to]the.voice.s06e13.hdtv.x264.2hd.ettv.torrent
2014-04-10 23:12 - 2014-04-10 23:12 - 00027753 _____ () C:\Users\Byron\Downloads\[kickass.to]the.voice.s06e14.hdtv.x264.2hd.ettv.torrent
2014-04-10 23:12 - 2014-04-10 23:12 - 00000000 ____D () C:\Users\Byron\Downloads\The Voice S06E14 HDTV x264-2HD[ettv]
2014-04-10 23:12 - 2014-04-10 23:12 - 00000000 ____D () C:\Users\Byron\Downloads\The Voice S06E13 HDTV x264-2HD[ettv]
2014-04-10 23:11 - 2014-04-10 23:11 - 00025443 _____ () C:\Users\Byron\Downloads\[kickass.to]vikings.s02e07.hdtv.x264.excellence.ettv.torrent
2014-04-10 08:16 - 2014-04-10 08:16 - 00001404 _____ () C:\Users\Byron\Downloads\agent.jnlp
2014-04-09 22:10 - 2014-04-09 22:10 - 00000000 ____D () C:\Users\Byron\Documents\BLACKBERRY-C16E
2014-04-09 21:11 - 2014-04-09 21:12 - 00000000 ____D () C:\Users\Byron\AppData\Local\Amazon Cloud Player
2014-04-09 21:11 - 2014-04-09 21:11 - 00001212 _____ () C:\Users\Byron\Desktop\Amazon Cloud Player.lnk
2014-04-09 21:11 - 2014-04-09 21:11 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Cloud Player
2014-04-09 21:10 - 2014-04-09 21:11 - 36335656 _____ (Amazon) C:\Users\Byron\Downloads\AmazonCloudPlayerInstaller_r26.exe
2014-04-08 21:20 - 2014-03-30 18:16 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-08 21:20 - 2014-03-30 18:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-08 21:20 - 2014-03-30 17:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-08 21:20 - 2014-03-30 16:57 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-08 21:19 - 2014-03-04 02:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-08 21:19 - 2014-03-04 02:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-08 21:19 - 2014-03-04 02:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-08 21:19 - 2014-03-04 02:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-08 21:19 - 2014-03-04 02:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-08 21:19 - 2014-03-04 02:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-08 21:19 - 2014-03-04 02:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-08 21:19 - 2014-03-04 02:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-08 21:19 - 2014-03-04 02:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-08 21:19 - 2014-03-04 01:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-08 21:19 - 2014-03-04 01:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-08 21:19 - 2014-02-03 19:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-08 21:19 - 2014-02-03 19:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-08 21:19 - 2014-02-03 19:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-08 21:19 - 2014-02-03 19:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-08 21:19 - 2014-02-03 19:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-08 21:19 - 2014-01-23 19:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-07 11:04 - 2014-04-07 11:04 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-06 23:50 - 2014-04-06 23:50 - 03930783 _____ () C:\Users\Byron\Downloads\OnlineScanner.cab
2014-04-06 21:56 - 2014-04-06 21:56 - 00184282 _____ () C:\Users\Byron\Downloads\OTL.Txt
2014-04-06 21:41 - 2014-04-06 21:41 - 00602112 _____ (OldTimer Tools) C:\Users\Byron\Downloads\OTL.exe
2014-04-04 04:29 - 2014-04-11 13:47 - 00001700 _____ () C:\Windows\PFRO.log
2014-04-03 00:06 - 2014-04-03 00:06 - 00000875 _____ () C:\Users\Byron\Desktop\BitTorrent.lnk
2014-04-03 00:06 - 2014-04-03 00:06 - 00000855 _____ () C:\Users\Byron\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2014-04-03 00:04 - 2014-04-03 00:04 - 01615960 _____ (BitTorrent Inc.) C:\Users\Byron\Downloads\bittorrent (1).exe
2014-04-02 02:22 - 2014-04-11 13:48 - 00003198 _____ () C:\Windows\setupact.log
2014-04-02 02:22 - 2014-04-02 02:22 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-01 15:23 - 2014-04-01 15:23 - 00225686 _____ () C:\Users\Byron\Desktop\Internet is extremely slow - Browsers, Internet and email.htm
2014-04-01 15:23 - 2014-04-01 15:23 - 00000000 ____D () C:\Users\Byron\Desktop\Internet is extremely slow - Browsers, Internet and email_files
2014-04-01 10:22 - 2014-04-09 16:27 - 00112084 _____ () C:\Users\Byron\Desktop\Food 3 27 14.xlsx
2014-03-31 22:43 - 2014-03-31 22:43 - 01615960 _____ (BitTorrent Inc.) C:\Users\Byron\Downloads\bittorrent.exe
2014-03-30 23:40 - 2014-03-30 23:40 - 00422256 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-30 17:26 - 2014-03-30 17:27 - 06228992 _____ () C:\Users\Byron\Desktop\ACN_Comp.ppt
2014-03-30 17:12 - 2014-03-30 17:21 - 00000000 ____D () C:\Users\Byron\Desktop\Tools in Spanish
2014-03-29 02:00 - 2014-03-29 02:00 - 00110088 _____ () C:\Users\Byron\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-27 16:50 - 2014-04-10 17:08 - 00013023 _____ () C:\Users\Byron\Desktop\Pipeline Report (2).xlsx
2014-03-26 17:01 - 2014-04-10 17:03 - 00010155 _____ () C:\Users\Byron\Desktop\Byron Perkins Sales Chart (2).xlsx
2014-03-25 19:55 - 2014-03-25 19:55 - 08407552 _____ () C:\Users\Byron\Desktop\Powerpoint Presentation 2.pps
2014-03-21 18:11 - 2012-05-04 19:29 - 00772504 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2014-03-21 18:11 - 2012-05-04 19:29 - 00687504 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2014-03-21 14:17 - 2014-03-21 14:17 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-21 14:16 - 2014-03-21 14:16 - 00000000 ____D () C:\Users\Byron\AppData\Local\SearchProtect
2014-03-19 08:18 - 2014-03-25 17:04 - 00117630 _____ () C:\Users\Byron\Desktop\Mar14 Leads..xlsx
2014-03-19 08:17 - 2014-03-25 17:03 - 00010136 _____ () C:\Users\Byron\Desktop\Byron Perkins Sales Chart.xlsx
2014-03-18 23:21 - 2014-04-01 15:13 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-03-18 23:21 - 2014-03-18 23:21 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\Optimizer Pro
2014-03-18 13:15 - 2014-03-18 13:15 - 00002211 _____ () C:\Users\Public\Desktop\TuneUp 1-Click Maintenance.lnk
2014-03-18 13:15 - 2014-03-18 13:15 - 00002185 _____ () C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk
2014-03-18 13:14 - 2014-03-18 13:15 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2014
2014-03-18 13:11 - 2014-03-18 13:42 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-03-18 12:13 - 2014-03-18 12:29 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\Nero
2014-03-18 12:12 - 2014-03-18 12:12 - 00000000 ____D () C:\Windows\System32\Tasks\Nero
2014-03-18 12:03 - 2014-03-18 12:11 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-03-18 02:02 - 2014-03-18 02:02 - 00000000 ____D () C:\Users\Byron\Documents\Optimizer Pro
2014-03-18 01:57 - 2014-03-18 01:57 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\IObit
2014-03-18 01:57 - 2014-03-18 01:57 - 00000000 ____D () C:\Program Files (x86)\Evonsoft Computer Repair
2014-03-17 20:34 - 2014-03-17 20:34 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\Ahead
2014-03-17 13:43 - 2014-03-18 01:50 - 00000000 ____D () C:\Users\Byron\Downloads\Brain Sync - Attract Wealth
2014-03-16 22:13 - 2002-01-05 07:37 - 00344064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr70.dll
2014-03-16 22:13 - 1998-06-18 01:00 - 00089360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB5DB.DLL
2014-03-16 16:55 - 2014-03-16 16:56 - 00000000 ____D () C:\Users\Byron\Downloads\Cheetah DVD Burner 2.51 + Serial-[HB]
2014-03-15 18:09 - 2014-03-15 18:09 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\AVAST Software
2014-03-15 18:08 - 2014-04-07 11:04 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-03-15 18:08 - 2014-04-07 11:04 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-03-15 18:08 - 2014-04-07 11:04 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-03-15 18:08 - 2014-04-07 11:04 - 00208928 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-03-15 18:08 - 2014-04-07 11:04 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-03-15 18:08 - 2014-04-07 11:04 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-03-15 18:08 - 2014-04-07 11:04 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-03-15 18:08 - 2014-04-07 11:04 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-03-15 18:08 - 2014-04-07 11:04 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-03-15 18:08 - 2014-04-07 11:04 - 00001968 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-03-15 18:07 - 2014-03-15 18:07 - 00000000 ____D () C:\Program Files\AVAST Software
2014-03-15 18:06 - 2014-03-15 18:06 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-03-13 00:54 - 2014-02-28 22:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 00:54 - 2014-02-28 21:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 00:54 - 2014-02-28 21:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 00:54 - 2014-02-28 21:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 00:54 - 2014-02-28 21:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 00:54 - 2014-02-28 21:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 00:54 - 2014-02-28 21:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 00:54 - 2014-02-28 21:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 00:54 - 2014-02-28 21:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 00:54 - 2014-02-28 21:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 00:54 - 2014-02-28 21:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 00:54 - 2014-02-28 21:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 00:54 - 2014-02-28 21:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 00:54 - 2014-02-28 20:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 00:54 - 2014-02-28 20:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 00:54 - 2014-02-28 20:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 00:54 - 2014-02-28 20:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 00:54 - 2014-02-28 20:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 00:54 - 2014-02-28 20:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 00:54 - 2014-02-28 20:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 00:54 - 2014-02-28 20:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 00:54 - 2014-02-28 20:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 00:54 - 2014-02-28 20:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 00:54 - 2014-02-28 20:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 00:54 - 2014-02-28 20:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 00:54 - 2014-02-28 20:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 00:54 - 2014-02-28 20:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 00:54 - 2014-02-28 20:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 00:54 - 2014-02-28 20:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 00:54 - 2014-02-28 20:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 00:54 - 2014-02-28 19:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 00:54 - 2014-02-28 19:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 00:54 - 2014-02-28 19:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 00:54 - 2014-02-28 19:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 00:54 - 2014-02-28 19:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 00:54 - 2014-02-28 19:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 00:51 - 2014-01-28 19:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 00:51 - 2014-01-28 19:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 00:51 - 2014-01-27 19:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 00:50 - 2014-02-06 18:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 00:45 - 2014-02-03 19:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 00:45 - 2014-02-03 19:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 00:45 - 2014-02-03 19:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 00:45 - 2014-02-03 19:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-12 08:45 - 2014-03-12 08:45 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2014-03-12 08:45 - 2014-03-12 08:45 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2014-03-12 08:17 - 2014-03-12 08:17 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
==================== One Month Modified Files and Folders =======
2014-04-11 14:02 - 2014-04-11 14:02 - 00019365 _____ () C:\Users\Byron\Downloads\FRST.txt
2014-04-11 14:02 - 2014-04-11 14:01 - 00000000 ____D () C:\FRST
2014-04-11 14:00 - 2014-04-11 14:00 - 02157056 _____ (Farbar) C:\Users\Byron\Downloads\FRST64.exe
2014-04-11 13:57 - 2014-04-11 13:57 - 00027825 _____ () C:\ComboFix.txt
2014-04-11 13:57 - 2014-04-11 13:57 - 00001404 _____ () C:\Users\Byron\Downloads\agent (3).jnlp
2014-04-11 13:57 - 2012-04-17 08:17 - 00000000 ____D () C:\Qoobox
2014-04-11 13:55 - 2009-07-13 21:45 - 00010240 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-11 13:55 - 2009-07-13 21:45 - 00010240 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-11 13:54 - 2000-03-22 03:27 - 01612114 _____ () C:\Windows\WindowsUpdate.log
2014-04-11 13:49 - 2009-07-13 19:34 - 00000215 _____ () C:\Windows\system.ini
2014-04-11 13:48 - 2014-04-02 02:22 - 00003198 _____ () C:\Windows\setupact.log
2014-04-11 13:48 - 2009-07-13 22:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-11 13:47 - 2014-04-04 04:29 - 00001700 _____ () C:\Windows\PFRO.log
2014-04-11 13:32 - 2014-04-11 13:32 - 05196025 ____R (Swearware) C:\Users\Byron\Downloads\ComboFix.exe
2014-04-11 13:30 - 2012-09-16 15:32 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\BitTorrent
2014-04-11 13:17 - 2012-04-04 00:39 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-11 12:11 - 2014-04-11 12:11 - 01056256 _____ () C:\Users\Byron\Desktop\NFL_ST_PROFIT_CALCULATOR.xls
2014-04-11 08:29 - 2014-04-11 08:29 - 00001404 _____ () C:\Users\Byron\Downloads\agent (2).jnlp
2014-04-11 08:29 - 2014-04-11 08:29 - 00001404 _____ () C:\Users\Byron\Downloads\agent (1).jnlp
2014-04-11 01:27 - 2014-04-11 01:19 - 525038428 ____R () C:\Users\Byron\Downloads\The.Amazing.Race.S24E06.HDTV.x264-LOL.mp4
2014-04-11 01:19 - 2014-04-11 01:19 - 00020502 _____ () C:\Users\Byron\Downloads\[kickass.to]the.amazing.race.s24e06.hdtv.x264.lol.eztv.torrent
2014-04-10 23:14 - 2014-04-10 23:14 - 00009606 _____ () C:\Users\Byron\Downloads\[kickass.to]the.blacklist.s01e18.hdtv.x264.lol.eztv.torrent
2014-04-10 23:12 - 2014-04-10 23:12 - 00045113 _____ () C:\Users\Byron\Downloads\[kickass.to]the.voice.s06e13.hdtv.x264.2hd.ettv.torrent
2014-04-10 23:12 - 2014-04-10 23:12 - 00027753 _____ () C:\Users\Byron\Downloads\[kickass.to]the.voice.s06e14.hdtv.x264.2hd.ettv.torrent
2014-04-10 23:12 - 2014-04-10 23:12 - 00000000 ____D () C:\Users\Byron\Downloads\The Voice S06E14 HDTV x264-2HD[ettv]
2014-04-10 23:12 - 2014-04-10 23:12 - 00000000 ____D () C:\Users\Byron\Downloads\The Voice S06E13 HDTV x264-2HD[ettv]
2014-04-10 23:11 - 2014-04-10 23:11 - 00025443 _____ () C:\Users\Byron\Downloads\[kickass.to]vikings.s02e07.hdtv.x264.excellence.ettv.torrent
2014-04-10 17:10 - 2011-06-24 23:24 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\vlc
2014-04-10 17:08 - 2014-03-27 16:50 - 00013023 _____ () C:\Users\Byron\Desktop\Pipeline Report (2).xlsx
2014-04-10 17:03 - 2014-03-26 17:01 - 00010155 _____ () C:\Users\Byron\Desktop\Byron Perkins Sales Chart (2).xlsx
2014-04-10 08:16 - 2014-04-10 08:16 - 00001404 _____ () C:\Users\Byron\Downloads\agent.jnlp
2014-04-09 22:40 - 2009-07-13 22:13 - 00006522 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-09 22:10 - 2014-04-09 22:10 - 00000000 ____D () C:\Users\Byron\Documents\BLACKBERRY-C16E
2014-04-09 21:51 - 2009-07-13 20:20 - 00000000 ____D () C:\Windows\rescache
2014-04-09 21:12 - 2014-04-09 21:11 - 00000000 ____D () C:\Users\Byron\AppData\Local\Amazon Cloud Player
2014-04-09 21:11 - 2014-04-09 21:11 - 00001212 _____ () C:\Users\Byron\Desktop\Amazon Cloud Player.lnk
2014-04-09 21:11 - 2014-04-09 21:11 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Cloud Player
2014-04-09 21:11 - 2014-04-09 21:10 - 36335656 _____ (Amazon) C:\Users\Byron\Downloads\AmazonCloudPlayerInstaller_r26.exe
2014-04-09 16:27 - 2014-04-01 10:22 - 00112084 _____ () C:\Users\Byron\Desktop\Food 3 27 14.xlsx
2014-04-09 03:07 - 2011-04-30 00:39 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-09 03:05 - 2013-07-28 03:01 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-09 03:02 - 2011-04-30 20:52 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-07 18:54 - 2012-08-26 23:40 - 03742208 ___SH () C:\Users\Byron\Desktop\Thumbs.db
2014-04-07 11:04 - 2014-04-07 11:04 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-07 11:04 - 2014-03-15 18:08 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-04-07 11:04 - 2014-03-15 18:08 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-04-07 11:04 - 2014-03-15 18:08 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-04-07 11:04 - 2014-03-15 18:08 - 00208928 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-04-07 11:04 - 2014-03-15 18:08 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-04-07 11:04 - 2014-03-15 18:08 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-04-07 11:04 - 2014-03-15 18:08 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-04-07 11:04 - 2014-03-15 18:08 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-04-07 11:04 - 2014-03-15 18:08 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-04-07 11:04 - 2014-03-15 18:08 - 00001968 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-04-06 23:50 - 2014-04-06 23:50 - 03930783 _____ () C:\Users\Byron\Downloads\OnlineScanner.cab
2014-04-06 21:56 - 2014-04-06 21:56 - 00184282 _____ () C:\Users\Byron\Downloads\OTL.Txt
2014-04-06 21:41 - 2014-04-06 21:41 - 00602112 _____ (OldTimer Tools) C:\Users\Byron\Downloads\OTL.exe
2014-04-06 21:20 - 2009-07-13 20:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-03 00:06 - 2014-04-03 00:06 - 00000875 _____ () C:\Users\Byron\Desktop\BitTorrent.lnk
2014-04-03 00:06 - 2014-04-03 00:06 - 00000855 _____ () C:\Users\Byron\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2014-04-03 00:04 - 2014-04-03 00:04 - 01615960 _____ (BitTorrent Inc.) C:\Users\Byron\Downloads\bittorrent (1).exe
2014-04-02 02:22 - 2014-04-02 02:22 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-01 15:23 - 2014-04-01 15:23 - 00225686 _____ () C:\Users\Byron\Desktop\Internet is extremely slow - Browsers, Internet and email.htm
2014-04-01 15:23 - 2014-04-01 15:23 - 00000000 ____D () C:\Users\Byron\Desktop\Internet is extremely slow - Browsers, Internet and email_files
2014-04-01 15:13 - 2014-03-18 23:21 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-04-01 15:13 - 2013-11-11 19:33 - 00000000 ____D () C:\Users\Byron\AppData\Local\NativeMessaging
2014-04-01 15:13 - 2012-07-01 17:58 - 00000000 ____D () C:\Users\Byron\AppData\Local\Conduit
2014-03-31 22:43 - 2014-03-31 22:43 - 01615960 _____ (BitTorrent Inc.) C:\Users\Byron\Downloads\bittorrent.exe
2014-03-31 17:47 - 2013-02-12 00:43 - 00000000 ___RD () C:\Users\Byron\Desktop\Jim Rohn
2014-03-31 12:00 - 2011-06-21 12:40 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\Dropbox
2014-03-30 23:42 - 2011-06-21 12:44 - 00000000 ___RD () C:\Users\Byron\Dropbox
2014-03-30 23:42 - 2011-04-29 19:50 - 00000000 ___RD () C:\Users\Byron\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-30 23:40 - 2014-03-30 23:40 - 00422256 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-30 18:16 - 2014-04-08 21:20 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-30 18:13 - 2014-04-08 21:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-30 17:27 - 2014-03-30 17:26 - 06228992 _____ () C:\Users\Byron\Desktop\ACN_Comp.ppt
2014-03-30 17:21 - 2014-03-30 17:12 - 00000000 ____D () C:\Users\Byron\Desktop\Tools in Spanish
2014-03-30 17:13 - 2014-04-08 21:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-30 16:57 - 2014-04-08 21:20 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-29 02:00 - 2014-03-29 02:00 - 00110088 _____ () C:\Users\Byron\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-25 19:55 - 2014-03-25 19:55 - 08407552 _____ () C:\Users\Byron\Desktop\Powerpoint Presentation 2.pps
2014-03-25 17:04 - 2014-03-19 08:18 - 00117630 _____ () C:\Users\Byron\Desktop\Mar14 Leads..xlsx
2014-03-25 17:03 - 2014-03-19 08:17 - 00010136 _____ () C:\Users\Byron\Desktop\Byron Perkins Sales Chart.xlsx
2014-03-21 16:06 - 2011-04-29 19:50 - 00000000 ____D () C:\Users\Byron
2014-03-21 15:19 - 2012-03-17 16:46 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-21 15:12 - 2011-12-31 07:15 - 00000000 ____D () C:\ProgramData\MFAData
2014-03-21 14:17 - 2014-03-21 14:17 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-21 14:16 - 2014-03-21 14:16 - 00000000 ____D () C:\Users\Byron\AppData\Local\SearchProtect
2014-03-20 22:49 - 2012-09-03 10:08 - 00000908 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3700817450-263443993-1340972289-1000UA.job
2014-03-20 22:49 - 2012-09-03 10:07 - 00000856 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3700817450-263443993-1340972289-1000Core.job
2014-03-20 22:47 - 2012-09-03 10:08 - 00003890 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3700817450-263443993-1340972289-1000UA
2014-03-20 22:47 - 2012-09-03 10:08 - 00003494 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3700817450-263443993-1340972289-1000Core
2014-03-20 22:28 - 2012-11-26 23:19 - 00000928 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3700817450-263443993-1340972289-1000UA.job
2014-03-20 22:28 - 2012-11-26 23:19 - 00000906 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3700817450-263443993-1340972289-1000Core.job
2014-03-19 20:24 - 2000-03-22 03:45 - 00003070 _____ () C:\Windows\System32\Tasks\ACMON
2014-03-19 20:19 - 2011-04-29 22:19 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-03-19 20:19 - 2011-04-29 22:19 - 00000000 ____D () C:\Program Files\WinRAR
2014-03-19 20:13 - 2011-04-29 20:26 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\Adobe
2014-03-19 20:13 - 2011-04-29 20:26 - 00000000 ____D () C:\Users\Byron\AppData\Local\Adobe
2014-03-18 23:21 - 2014-03-18 23:21 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\Optimizer Pro
2014-03-18 23:15 - 2000-03-22 03:46 - 00003092 _____ () C:\Windows\System32\Tasks\WC3
2014-03-18 23:15 - 2000-03-22 03:45 - 00003112 _____ () C:\Windows\System32\Tasks\ASUSControlDeck
2014-03-18 23:15 - 2000-03-22 03:45 - 00003042 _____ () C:\Windows\System32\Tasks\ASUS P4G
2014-03-18 23:15 - 2000-03-22 03:45 - 00003004 _____ () C:\Windows\System32\Tasks\ASUS Live Update
2014-03-18 23:15 - 2000-03-22 03:45 - 00002988 _____ () C:\Windows\System32\Tasks\ASUS SmartLogon Console Sensor
2014-03-18 23:11 - 2012-11-26 23:19 - 00003916 _____ () C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3700817450-263443993-1340972289-1000UA
2014-03-18 23:11 - 2012-11-26 23:19 - 00003548 _____ () C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3700817450-263443993-1340972289-1000Core
2014-03-18 21:44 - 2012-01-08 22:30 - 00000896 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-18 21:44 - 2012-01-08 22:30 - 00000892 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-18 13:42 - 2014-03-18 13:11 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-03-18 13:42 - 2012-04-15 10:50 - 00000000 ____D () C:\ProgramData\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}
2014-03-18 13:42 - 2012-04-08 09:58 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\HpUpdate
2014-03-18 13:42 - 2012-03-11 01:29 - 00000000 ____D () C:\Users\Byron\AppData\Local\Downloaded Installations
2014-03-18 13:42 - 2012-02-14 18:58 - 00000000 __SHD () C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2014-03-18 13:42 - 2011-04-30 01:39 - 00000000 ____D () C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2014-03-18 13:42 - 2011-04-30 00:39 - 00000000 ____D () C:\Users\Byron\AppData\Local\Microsoft Help
2014-03-18 13:34 - 2012-01-08 22:30 - 00003904 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-18 13:34 - 2012-01-08 22:30 - 00003652 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-18 13:17 - 2011-12-13 20:55 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-03-18 13:15 - 2014-03-18 13:15 - 00002211 _____ () C:\Users\Public\Desktop\TuneUp 1-Click Maintenance.lnk
2014-03-18 13:15 - 2014-03-18 13:15 - 00002185 _____ () C:\Users\Public\Desktop\TuneUp Utilities 2014.lnk
2014-03-18 13:15 - 2014-03-18 13:14 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2014
2014-03-18 13:14 - 2011-12-13 20:57 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\TuneUp Software
2014-03-18 12:29 - 2014-03-18 12:13 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\Nero
2014-03-18 12:25 - 2000-03-22 03:39 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-18 12:12 - 2014-03-18 12:12 - 00000000 ____D () C:\Windows\System32\Tasks\Nero
2014-03-18 12:11 - 2014-03-18 12:03 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-03-18 12:06 - 2011-04-29 22:29 - 00000000 ____D () C:\ProgramData\Nero
2014-03-18 11:39 - 2014-03-02 23:42 - 00000000 ____D () C:\ProgramData\SpeedyPC Software
2014-03-18 02:02 - 2014-03-18 02:02 - 00000000 ____D () C:\Users\Byron\Documents\Optimizer Pro
2014-03-18 01:57 - 2014-03-18 01:57 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\IObit
2014-03-18 01:57 - 2014-03-18 01:57 - 00000000 ____D () C:\Program Files (x86)\Evonsoft Computer Repair
2014-03-18 01:50 - 2014-03-17 13:43 - 00000000 ____D () C:\Users\Byron\Downloads\Brain Sync - Attract Wealth
2014-03-17 20:34 - 2014-03-17 20:34 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\Ahead
2014-03-16 23:21 - 2011-05-01 01:33 - 00000000 ____D () C:\Windows\pss
2014-03-16 16:56 - 2014-03-16 16:55 - 00000000 ____D () C:\Users\Byron\Downloads\Cheetah DVD Burner 2.51 + Serial-[HB]
2014-03-16 16:36 - 2014-03-07 23:23 - 00000000 ____D () C:\Users\Byron\AppData\Local\Ahead
2014-03-15 21:13 - 2011-04-30 01:57 - 00000000 ____D () C:\Users\Byron\Documents\BlackBerry
2014-03-15 18:09 - 2014-03-15 18:09 - 00000000 ____D () C:\Users\Byron\AppData\Roaming\AVAST Software
2014-03-15 18:07 - 2014-03-15 18:07 - 00000000 ____D () C:\Program Files\AVAST Software
2014-03-15 18:06 - 2014-03-15 18:06 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-03-15 17:17 - 2011-06-03 10:48 - 00007597 _____ () C:\Users\Byron\AppData\Local\Resmon.ResmonCfg
2014-03-13 18:10 - 2011-09-02 08:57 - 00000000 ____D () C:\Users\Byron\AppData\Local\Workspace
2014-03-13 03:21 - 2013-09-08 16:58 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 03:21 - 2013-09-08 16:58 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 08:45 - 2014-03-12 08:45 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2014-03-12 08:45 - 2014-03-12 08:45 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2014-03-12 08:18 - 2012-04-04 00:39 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 08:17 - 2014-03-12 08:17 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-12 08:17 - 2012-04-04 00:39 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 08:17 - 2011-09-15 18:11 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
ZeroAccess:
C:\Windows\Installer\{cbcbd993-506d-96b9-6602-879c2385f055}
ZeroAccess:
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\{cbcbd993-506d-96b9-6602-879c2385f055}
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
ATTENTION: ====> ZeroAccess. Use DeleteJunctionsIndirectory: C:\Windows\system64
LastRegBack: 2014-04-09 21:42
==================== End Of Log ============================
Malware Guy
Posted 11 April 2014 - 03:28 PM
Before we continue....would it be accurate in saying that you probably have ran ComboFix on your system about 10 times already???
Please go to C:\ComboFix5.txt and attach that text file. 
Authentic Member
Posted 11 April 2014 - 05:03 PM
I ran ComboFix the last year in the summer when I fixed my computer then. But i haven't run it since then, until you mentioned it today. So I downloaded it, ran it, and posted the txt.
Authentic Member
Posted 11 April 2014 - 05:08 PM
Malware Guy
Posted 12 April 2014 - 12:49 PM
Oh....you have CA Antivirus.....ComboFix can get a bit wonky with that. Rather than having you uninstall it....please do the following:
FRST
Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
----------
Authentic Member
Posted 12 April 2014 - 01:13 PM
Hi Jeff,
I don't use CA Antivirus. I didn't even know it was still on my system. I use Avast Antivirus.
CA Antivirus doesn't show up in my Control Panel.
Edited by Bperkins7468, 12 April 2014 - 01:14 PM.
Register to Remove
Malware Guy
Posted 12 April 2014 - 04:49 PM
It was still showing up in the logs.
To be on the safe side, go ahead with FRST and post the new log please.
Authentic Member
Posted 12 April 2014 - 10:26 PM
Malware Guy
Posted 13 April 2014 - 10:06 AM
Download CKScanner by askey127 from Here & save it to your Desktop.
----------
Authentic Member
Posted 13 April 2014 - 11:22 AM
Malware Guy
Posted 14 April 2014 - 12:20 PM
Sorry for any delay.....I have been swamped with work and school. I will have instructions for you tonight.
0 members, 0 guests, 0 anonymous users
Community Forum Software by IP.Board
Licensed to: What the Tech
